From 381bf9d40d6b828d3d218d29ec520a04b38c051a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E4=B8=96=E7=95=8C?= <i@sekai.icu>
Date: Wed, 28 Jan 2026 14:34:10 +0800
Subject: [PATCH] Skip tun interface traffic in prerouting UDP/ICMP chain

---
 redirect_nftables.go | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/redirect_nftables.go b/redirect_nftables.go
index 4dea1c1..f7253cc 100644
--- a/redirect_nftables.go
+++ b/redirect_nftables.go
@@ -192,6 +192,25 @@ func (r *autoRedirect) setupNFTables() error {
 				},
 			},
 		})
+		nft.AddRule(&nftables.Rule{
+			Table: table,
+			Chain: chainPreRoutingUDP,
+			Exprs: []expr.Any{
+				&expr.Meta{
+					Key:      expr.MetaKeyIIFNAME,
+					Register: 1,
+				},
+				&expr.Cmp{
+					Op:       expr.CmpOpEq,
+					Register: 1,
+					Data:     nftablesIfname(r.tunOptions.Name),
+				},
+				&expr.Counter{},
+				&expr.Verdict{
+					Kind: expr.VerdictReturn,
+				},
+			},
+		})
 		nft.AddRule(&nftables.Rule{
 			Table: table,
 			Chain: chainPreRoutingUDP,